I just continue my previus screnario to be use NAT on Corp1 Network:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
R1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! new line 10.10.10.8 0.0.0.3 area 0 is the new subnett for corp1 net
router ospf 10 log-adjacency-changes network 1.1.1.1 0.0.0.0 area 0 network 10.10.10.0 0.0.0.3 area 0 network 10.10.10.4 0.0.0.3 area 0 network 10.10.10.8 0.0.0.3 area 0 !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORP1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
interface Ethernet1/0 ip address 10.10.10.10 255.255.255.252 ip nat outside ip virtual-reassembly half-duplex ! interface Ethernet1/1 ip address 192.168.10.1 255.255.255.252 ip nat inside ip virtual-reassembly half-duplex ! interface Ethernet1/2 ip address 192.168.20.1 255.255.255.252 ip nat inside ip virtual-reassembly half-duplex ! interface Ethernet1/3 no ip address shutdown half-duplex ! ip http server ip route 0.0.0.0 0.0.0.0 10.10.10.9 ! ! ip nat inside source list NAT1 interface Ethernet1/0 overload ! ! ip access-list standard NAT1 permit 192.168.0.0 0.0.255.255 !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
PC1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! hostname PC1 ! interface Ethernet1/0 ip address 192.168.10.2 255.255.255.252 no ip route-cache half-duplex ! ip default-gateway 192.168.10.1 !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
PC2
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! hostname PC2 ! ! interface Ethernet1/0 ip address 192.168.20.2 255.255.255.252 ! ! ip default-gateway 192.168.20.1 ! Test Ping : PC2#ping 2.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 56/71/100 ms
Make sure the Translation are work in Corp1 Router
Corp1>ena Corp1#sho ip nat trans Pro Inside global Inside local Outside local Outside global icmp 10.10.10.10:9 192.168.20.2:9 2.2.2.2:9 2.2.2.2:9
in this screnario I can see the address 192.168.20.2 send ICMP req packet to 2.2.2.2 are translate to 10.10.10.10 port 9,
so when the dest Host reply with ICMP reply the router will translate back to 192.168.20.1 port9 that listed in
NAT translation database. that’s the PAT ( Port Address Translation).
sweet…